HP-UX AAA Server A.08.02 Administrator's Guide

Table 70 The sqlaccess.config Sample File
OperationTable Operated OnSQL Action
Retrieves the user profile. Uses SQL result
mapping to test that at least one row is
RAD_USERS_TABLERetrieveUser
returned and sets event to
RETRIEVE_SUCCESS upon exiting to the
FSM.
Retrieves token information. Uses SQL result
mapping to test that at least one row is
RAD_TOKENS_TABLERetrieveToken
returned and sets the event to
RETRIEVE_SUCCESS on exiting to the
FSM.
Retrieves user and token information. Uses
SQL result mapping to test that at least one
RAD_TOKENS_TABLE and
RAD_USERS_TABLE
RetrieveUserAndToken
row is returned and sets the event to
RETRIEVE_SUCCESS on exiting to the
FSM.
A stored procedure that is created using
dbsetup.sql. This procedure updates
RAD_TOKENS_TABLEUpdateSequenceCounter
AndSuccessAuthCount
the sequence counter that is passed as an
argument. This action is called after
successful OTP authentication. This stored
procedure also increments the success
authentication count.
A stored procedure that is created using
dbsetup.sql. This procedure increments
RAD_TOKENS_TABLEUpdateFailedAuthCount
AndTokenStatus
the failed authentication count after a failed
authentication.
This stored procedure also increments the
lock counter for each failed authentication.
If the number of consecutive failed
authentication attempts is greater than the
configured token lock counter value (default
6), where the time interval between two
consecutive failed authentication attempts
is less than 60 seconds, it updates the token
status to LOCKED.
Inserts a row to the accounting table for
each user to start accounting.
RAD_ACCT_TABLEInsertAcct
Updates the column update_time in the
accounting table with the current time for
an active account.
RAD_ACCT_TABLEUpdateAcct
Sets the stop time in the accounting table
for a given session ID.
RAD_ACCT_TABLEStopAcct
Inserts a user session entry.RAD_SESS_TABLEStartSession
Removes a user session entry.RAD_SESS_TABLEStopSession
Removes all expired sessions that are older
than 24 hours.
RAD_SESS_TABLECleanupExpired
Sessions
Sets the stop time for all accounts that
match the client’s NAS identifier.
RAD_ACCT_TABLEStopAllAccts
Removes all sessions from the session table
that match the client’s NAS identifier.
RAD_SESS_TABLECleanupAllSessions
Uses a stored procedure to return the IP
address of the session entry and removes
RAD_SESS_TABLEStopSession-DHCP (OCI
only)
Implementing SQL Access 251